$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft File: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft (raw, json) Hash identifier: P1DCrznssCzOJ7DqjkklBUNu7sW25kmLGhQkJNaU55Q= Subject key identifier: F1:51:36:F7:64:38:64:55:EF:DE:D5:5F:BC:B1:DF:4A:23:3C:99:37 Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E Certificate issuer: /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft Manifest number: 12 Signing time: Sun 19 Oct 2025 11:29:54 +0000 Manifest this update: Sun 19 Oct 2025 11:29:53 +0000 Manifest next update: Sun 26 Oct 2025 11:29:53 +0000 Files and hashes: 1: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl (hash: +JKkwxJwYkcS7e9Zb4SpX4YJAIqaQAmU7WFrhzEviKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E Validity Not Before: Oct 19 11:29:53 2025 GMT Not After : Oct 26 11:29:53 2025 GMT Subject: CN=68f4cbb2-f257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:d7:a9:48:9b:44:68:b7:45:98:2f:37:11: 20:1d:56:b6:d4:eb:0d:cb:7b:2d:0e:b6:79:17:cc: ef:57:c8:ea:ff:6f:4d:e5:23:71:5d:a8:df:06:a3: be:f4:b8:80:a6:43:61:17:35:b6:d9:8d:1c:ee:6c: 05:62:bc:cd:06:a3:f3:c3:f7:59:53:27:b1:14:46: 1f:55:b2:9a:3e:a6:ba:c9:f9:92:06:eb:f1:ef:d2: 88:3b:57:d2:b1:27:e6:71:7a:77:be:64:bc:4c:75: c8:d4:cc:6c:21:de:de:d0:6a:77:3b:ec:95:a7:53: c8:c9:02:74:69:5b:e9:90:a8:10:79:60:3a:bf:c4: 1f:cc:e8:0a:6d:cf:40:01:30:e8:6b:f3:fa:a6:d6: c1:d5:22:4e:bc:97:9b:c0:0c:7a:b4:2c:ee:0c:af: a1:cf:a7:6a:68:a6:f1:be:d7:f5:ce:98:9b:10:52: 3b:d3:3c:dc:1b:82:2c:88:b2:c0:33:f2:64:df:d8: 2a:b3:37:b9:8f:9e:16:f5:ae:78:22:78:0a:53:37: 5a:bf:88:ba:31:f5:63:e1:eb:19:59:86:53:c5:91: f2:85:91:db:f4:04:d7:b7:3f:97:73:2c:3d:b5:9e: 2b:44:25:0c:83:9c:9a:8a:c8:1b:9b:f6:35:dc:a3: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:51:36:F7:64:38:64:55:EF:DE:D5:5F:BC:B1:DF:4A:23:3C:99:37 X509v3 Authority Key Identifier: keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d5:eb:65:42:e9:aa:12:d7:b7:a5:69:02:12:bc:f3:04:63: 38:aa:20:f7:fa:24:70:f4:ad:b5:78:2d:ac:45:a2:90:42:7e: 21:18:c6:9b:2e:7d:6e:52:7e:80:49:7e:b5:17:9b:06:b3:0d: 6e:14:cb:1f:89:4b:21:7b:62:4e:b8:0d:d0:09:12:b9:70:91: ee:ee:36:c3:5e:55:2c:31:86:59:af:84:0c:63:99:67:b1:02: ac:e8:fd:de:38:74:f9:4d:24:b7:97:d1:27:68:13:68:93:bc: 67:b0:52:20:c4:06:a5:ab:3b:b8:c2:35:70:f4:8a:c1:42:12: 94:79:71:3d:7e:8f:c6:16:9d:df:14:c6:4d:9e:7b:db:8d:a9: 3f:54:ee:10:5d:b3:3c:85:b3:6f:e4:c2:4d:38:8b:35:13:c4: d5:65:c2:4f:9d:c4:0d:60:57:20:ce:67:3b:13:4f:bc:dc:da: 41:79:20:ea:85:ea:08:17:58:cd:2a:21:a1:ee:4f:0f:88:78: 0e:a1:8c:17:02:60:8a:4a:18:dc:d7:8e:e0:d1:92:81:fa:5b: 7d:d3:aa:1a:10:15:cd:5b:44:1d:fd:c7:55:47:82:b6:3b:fa: b5:18:14:08:f5:75:1f:b2:cc:6c:d1:d6:36:11:11:a4:f1:a0: 6f:8d:f8:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTcyNzExMC8GA1UEBRMoREU2Q0RBNjlBQjFBQzg5QUU3NUY3NjVDRTc3MjczRTEx QjdGRDY3RTAeFw0yNTEwMTkxMTI5NTNaFw0yNTEwMjYxMTI5NTNaMBgxFjAUBgNV BAMTDTY4ZjRjYmIyLWYyNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfjdepSJtEaLdFmC83ESAdVrbU6w3Ley0OtnkXzO9XyOr/b03lI3FdqN8Go770 uICmQ2EXNbbZjRzubAVivM0Go/PD91lTJ7EURh9Vspo+prrJ+ZIG6/Hv0og7V9Kx J+Zxene+ZLxMdcjUzGwh3t7Qanc77JWnU8jJAnRpW+mQqBB5YDq/xB/M6Aptz0AB MOhr8/qm1sHVIk68l5vADHq0LO4Mr6HPp2popvG+1/XOmJsQUjvTPNwbgiyIssAz 8mTf2CqzN7mPnhb1rngieApTN1q/iLox9WPh6xlZhlPFkfKFkdv0BNe3P5dzLD21 nitEJQyDnJqKyBub9jXco9JLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8VE292Q4 ZFXv3tVfvLHfSiM8mTcwHwYDVR0jBBgwFoAU3mzaaasayJrnX3Zc53Jz4Rt/1n4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NzI3LzI1NDMyNDRDOTIw NzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpyblgzWmM1M0p6NFJ0XzFu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM216YWFhc2F5SnJuWDNaYzUzSno0UnRfMW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NzI3LzI1NDMyNDRDOTIwNzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpy blgzWmM1M0p6NFJ0XzFuNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrV62VC6aoS17elaQISvPMEYziqIPf6JHD0rbV4LaxFopBCfiEYxpsu fW5SfoBJfrUXmwazDW4Uyx+JSyF7Yk64DdAJErlwke7uNsNeVSwxhlmvhAxjmWex Aqzo/d44dPlNJLeX0SdoE2iTvGewUiDEBqWrO7jCNXD0isFCEpR5cT1+j8YWnd8U xk2ee9uNqT9U7hBdszyFs2/kwk04izUTxNVlwk+dxA1gVyDOZzsTT7zc2kF5IOqF 6ggXWM0qIaHuTw+IeA6hjBcCYIpKGNzXjuDRkoH6W33TqhoQFc1bRB39x1VHgrY7 +rUYFAj1dR+yzGzR1jYREaTxoG+N+GU= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:51 2025 by rpki-client